Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Service - Amazon GuardDuty

Service

Contains additional information about the generated finding.

Contents

action

Information about the activity that is described in a finding.

Type: Action object

Required: No

additionalInfo

Contains additional information about the generated finding.

Type: ServiceAdditionalInfo object

Required: No

archived

Indicates whether this finding is archived.

Type: Boolean

Required: No

count

The total count of the occurrences of this finding type.

Type: Integer

Required: No

detection

Contains information about the detected unusual behavior.

Type: Detection object

Required: No

detectorId

The detector ID for the GuardDuty service.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 300.

Required: No

ebsVolumeScanDetails

Returns details from the malware scan that created a finding.

Type: EbsVolumeScanDetails object

Required: No

eventFirstSeen

The first-seen timestamp of the activity that prompted GuardDuty to generate this finding.

Type: String

Required: No

eventLastSeen

The last-seen timestamp of the activity that prompted GuardDuty to generate this finding.

Type: String

Required: No

evidence

An evidence object associated with the service.

Type: Evidence object

Required: No

featureName

The name of the feature that generated a finding.

Type: String

Required: No

malwareScanDetails

Returns details from the malware scan that generated a GuardDuty finding.

Type: MalwareScanDetails object

Required: No

resourceRole

The resource role information for this finding.

Type: String

Required: No

runtimeDetails

Information about the process and any required context values for a specific finding

Type: RuntimeDetails object

Required: No

serviceName

The name of the AWS service (GuardDuty) that generated a finding.

Type: String

Required: No

userFeedback

Feedback that was submitted about the finding.

Type: String

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following:

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.